Try our new research platform with insights from 80,000+ expert users

CloudCheckr vs Snyk comparison

 

Comparison Buyer's Guide

Executive SummaryUpdated on Oct 9, 2025

Review summaries and opinions

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Categories and Ranking

CloudCheckr
Ranking in Cloud Management
31st
Average Rating
7.8
Reviews Sentiment
6.9
Number of Reviews
9
Ranking in other categories
Cloud Cost Management (12th), Managed Cloud Services (5th), AI Observability (24th)
Snyk
Ranking in Cloud Management
13th
Average Rating
8.2
Reviews Sentiment
7.4
Number of Reviews
50
Ranking in other categories
Application Performance Monitoring (APM) and Observability (17th), Application Security Tools (6th), Static Application Security Testing (SAST) (7th), GRC (5th), Vulnerability Management (13th), Container Security (6th), Software Composition Analysis (SCA) (1st), Software Development Analytics (2nd), Cloud Security Posture Management (CSPM) (16th), DevSecOps (3rd), Application Security Posture Management (ASPM) (2nd), AI Security (4th)
 

Mindshare comparison

As of December 2025, in the Cloud Management category, the mindshare of CloudCheckr is 1.5%, up from 1.1% compared to the previous year. The mindshare of Snyk is 1.8%, up from 0.4% compared to the previous year. It is calculated based on PeerSpot user engagement data.
Cloud Management Market Share Distribution
ProductMarket Share (%)
Snyk1.8%
CloudCheckr1.5%
Other96.7%
Cloud Management
 

Featured Reviews

Peter Ramnath - PeerSpot reviewer
Associate Director, ITSM & Onboarding at a computer software company with 201-500 employees
Provides recommendations regarding how cost and consumption can be adjusted, but the reporting and analytic capabilities are very limited
We are not happy with the product’s reporting capabilities. We are planning to change the solution. The security compliance feature doesn’t give much data because CloudCheckr has done a majority of its development on AWS. The majority of our clients are on Microsoft Azure. There are a lot of features and information available for Amazon, but not for Azure. The tool wasn't meeting our expectations. The reporting and analytic capabilities are very limited. There's no ability to do scheduled email reports. The report could only be sent to a single email address. The tool was not very usable. We had multiple clients and tasks to work with.
Abhishek-Goyal - PeerSpot reviewer
Software Engineer at a computer software company with 11-50 employees
Improves security posture by actively reducing critical vulnerabilities and guiding remediation
Snyk's main features include open-source vulnerability scanning, code security, container security, infrastructure as code security, risk-based prioritization, development-first integration, continuous monitoring and alerting, automation, and remediation. The best features I appreciate are the vulnerability checking, vulnerability scanning, and code security capabilities, as Snyk scans all open-source dependencies for known vulnerabilities and helps with license compliance for open-source components. Snyk integrates into IDEs, allowing issues to be caught as they appear in the code dynamically and prioritizes risk while providing remediation advice. Snyk provides actionable remediation advice on where vulnerabilities can exist and where code security is compromised, automatically scanning everything and providing timely alerts. Snyk has positively impacted my organization by improving the security posture across all software repositories, resulting in fewer critical vulnerabilities, more confidence in overall product security, and faster security compliance for project clients. Snyk has helped reduce vulnerabilities significantly. Initially, the repository had 17 to 31 critical and high vulnerabilities, but Snyk has helped manage them down to just five vulnerabilities, which are now lower and not high or critical.

Quotes from Members

We asked business professionals to review the solutions they use. Here are some excerpts of what they said:
 

Pros

"The best feature I like about CloudCheckr CMx High Security is its simplicity. I love that it's not rocket science to use the solution. Even if you're not familiar with the cloud, you can easily figure out how to use CloudCheckr CMx High Security. You can use AWS, you can use Azure, and you can use GCP with the solution because the integration is quite simple. You can also use multi-cloud with it, and you could see the billing part. You'll have complete visibility into your cost which I love about the solution. I also love that data on any security issues and vulnerabilities are available on the go with CloudCheckr CMx High Security. You don't need to do anything different. Just run the scan and you'll have all these open findings in the tool, in terms of the priority level, so if it's critical, it will tell you, "It's critical," and you need to fix it right away."
"The solution is scalable for our purposes."
"The most valuable feature of CloudCheckr CMx High Security is granular reporting. Additionally, the user interface is easy to use."
"It's one of the leading players for cloud optimization. It's hard to find anything better."
"CloudCheckr has impacted my organization positively by making things easier and saving time, approximately three hours a week."
"It will automatically suggest areas for optimization."
"The solution is mostly stable."
"The initial setup is straightforward."
"Its reports are nice and provide information about the issue as well as resolution. They also provide a proper fix. If there's an issue, they provide information in detail about how to remediate that issue."
"Snyk's focus on security is a valuable feature. Also Snyk supports multiple programming languages, which has positively affected my security practices. I use only two or three languages, and when I change the language in a file, it detects it in the same suite. I find the AI-powered scanning overall beneficial.Using Snyk's AI-powered scanning, I can detect around ten or twenty errors in my project with about twenty thousand lines of code, so it helps improve my project by identifying a lot of potential vulnerabilities."
"Provides clear information and is easy to follow with good feedback regarding code practices."
"The dependency checks of the libraries are very valuable, but the licensing part is also very important because, with open source components, licensing can be all over the place. Our project is not an open source project, but we do use quite a lot of open source components and we want to make sure that we don't have surprises in there."
"Snyk has given us really good results because it is fully automated. We don't have to scan projects every time to find vulnerabilities, as it already stores the dependencies that we are using. It monitors 24/7 to find out if there are any issues that have been reported out on the Internet."
"Snyk is a good and scalable tool."
"The CLI feature is quite useful because it gives us a lot of flexibility in what we want to do. If you use the UI, all the information is there and you can see what Snyk is showing you, but there is nothing else that you can change. However, when you use the CLI, then you can use commands and can get the output or response back from Snyk. You can also take advantage of that output in a different way. For the same reason, we have been using the CLI for the hard gate in the pipeline: Obtain a particular CDSS score for vulnerability. Based on that information, we can then decide if we want to block or allow the build. We have more flexibility if we use the CLI."
"From the software composition analysis perspective, it first makes sure that we understand what is happening from a third-party perspective for the particular product that we use. This is very difficult when you are building software and incorporating dependencies from other libraries, because those dependencies have dependencies and that chain of dependencies can go pretty deep. There could be a vulnerability in something that is seven layers deep, and it would be very difficult to understand that is even affecting us. Therefore, Snyk provides fantastic visibility to know, "Yes, we have a problem. Here is where it ultimately comes from." It may not be with what we're incorporating, but something much deeper than that."
 

Cons

"The reporting and analytic capabilities are very limited."
"Self-healing could be a bit smoother and a bit cleaner, easier to access and more functional. That would help."
"What needs to be improved in CloudCheckr CMx High Security is integration. All the clouds are going quite fast, for example, all the cloud providers: Microsoft, Google, etc. CloudCheckr CMx High Security is good with AWS, no doubt about it, but with Azure and Google Cloud, I find that the solution is slow in that direction. If the vendor planned for CloudCheckr CMx High Security to be automated just for AWS, then it does make sense. If not, if the vendor is also targeting good integration with Google and Microsoft, then CloudCheckr CMx High Security integration needs improvement, in particular, it has to be faster. At the moment, its integration with Azure is not as good as its integration with AWS. With GCP, integration is nowhere."
"The solution must improve its user interface."
"CloudCheckr CMx High Security is complex. There are a lot of menus, and if you do not know what you are looking for you can get lost. However, the interface is self-explanatory. It's easy to understand where to go to get what you want."
"The performance of the tool really needs to be improved."
"Many features still need to be implemented in this tool."
"The solution needs to work better with larger capacities of data."
"Although Snyk is strong, sometimes it flags vulnerabilities that are not reachable, not exploitable, and not relevant to a project."
"The log export function could be easier when shipping logs to other platforms such as Splunk."
"All such tools should definitely improve the signatures in their database. Snyk is pretty new to the industry. They have a pretty good knowledge base, but Veracode is on top because Veracode has been in this business for a pretty long time. They do have a pretty large database of all the findings, and the way that the correlation engine works is superb. Snyk is also pretty good, but it is not as good as Veracode in terms of maintaining a large space of all the historical data of vulnerabilities."
"Snyk's API and UI features could work better in terms of speed."
"The tool's initial use is complex."
"Compatibility with other products would be great."
"Could include other types of security scanning and statistical analysis"
"They need to improve the Snyk plugins and make it easier to make your optimizations based on your own needs or features."
 

Pricing and Cost Advice

"A license is needed to use CloudCheckr CMx High Security, but because we are a managed service provider, the price of the license would vary. It depends on the type of cloud users we have, for example, it would be some type of percentage or monthly billing, etc."
"The solution is reasonably priced."
"The cost is on par with other providers."
"The product's price is okay."
"For what Snyk offers, it has the best cost-benefit I have ever seen because you're buying the license per user."
"It's inexpensive and easy to license. It comes in standard package sizing, which is straightforward. This information is publicly found on their website."
"The solution is less expensive than Black Duck."
"The price of the solution is expensive compared to other solutions."
"We are using the open-source version for the scans."
"We do have some missing licenses issues, especially with non-SPDX compliant one, but we expect this to be fixed soon"
"I didn't think the price was that great, but it wasn't that bad, either. I'd rate their pricing as average in the market."
report
Use our free recommendation engine to learn which Cloud Management solutions are best for your needs.
879,310 professionals have used our research since 2012.
 

Top Industries

By visitors reading reviews
Computer Software Company
16%
Manufacturing Company
10%
University
6%
Government
6%
Financial Services Firm
14%
Computer Software Company
12%
Manufacturing Company
10%
Insurance Company
6%
 

Company Size

By reviewers
Large Enterprise
Midsize Enterprise
Small Business
By reviewers
Company SizeCount
Small Business2
Midsize Enterprise1
Large Enterprise7
By reviewers
Company SizeCount
Small Business21
Midsize Enterprise9
Large Enterprise21
 

Questions from the Community

What do you like most about CloudCheckr ?
The recommendation section is pretty helpful.
What is your experience regarding pricing and costs for CloudCheckr ?
My experience with pricing, setup cost, and licensing is fantastic.
What needs improvement with CloudCheckr ?
An area where CloudCheckr can be improved is pricing. There are no other improvements needed for CloudCheckr that I haven't mentioned.
How does Snyk compare with SonarQube?
Snyk does a great job identifying and reducing vulnerabilities. This solution is fully automated and monitors 24/7 to find any issues reported on the internet. It will store dependencies that you a...
What do you like most about Snyk?
The most effective feature in securing project dependencies stems from its ability to highlight security vulnerabilities.
What needs improvement with Snyk?
There are a lot of false positives that need to be identified and separated. The inclusion of AI to remove false positives would be beneficial. So far, I've not seen any AI features to enhance vuln...
 

Comparisons

 

Also Known As

CloudCheckr CMx High Security, CloudCheckr CMP
Fugue, Snyk AppRisk
 

Overview

 

Sample Customers

Accenture, Logitech, Ingram, Cloudar, Infor, DXC, Cornell University, DLT, Lumen, Lightstream, Choice Hotels, B-Tech, SmileShark, PTP, Explicity, JCH Technology, Siemens Mobility
StartApp, Segment, Skyscanner, DigitalOcean, Comic Relief
Find out what your peers are saying about CloudCheckr vs. Snyk and other solutions. Updated: December 2025.
879,310 professionals have used our research since 2012.